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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1.-18. (cancelled) 

19. (currently amended) A computer platform comprising: 

a trusted module which is resistant to internal tampering and which stores a third party's 
public key certificate; 

means for storing license-related code comprising at least one of a secure executor for 
checking whether the computer platform or a user thereof is licensed to use particular data and for 
providing an interface for using the particular data and/ or for monitoring its usage, and a secure 
loader for checking whether the computer platform or a user thereof is licensed to install particular 
data and/ or for checking for data integrity before installation, wherein the license-related code 
includes, for at least one group of particular data, a (or a respective) software executor which 
specifies the respective group of particular data and which is operable configured to act as an 
interface to that group of particular data; 

means for storing a hashed version of the license-related code signed with the third party's 
private key; and 

means for integrity checking the license-related code with reference to the signed version 
and the public key certificate and preventing the license-related code from being loaded if the 
integrity check fails; and wherein: 

the software executor (or at least one of the software executors) contains a public key of the 
trusted module and a licensing model for the respective particular data; 

the platform includes an operating system that is operable configured to request the software 
executor that its respective particular data be used; 

in response to such a request, that software executor is operable configured to request the 
secure executor to license-check, using its licensing model, whether the computer platform or a user 
thereof is licensed to use that particular data; 
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in response to such latter request, the secure executor is operable configured to perform the 
requested license-check, to sign the result of the license check using a private key of the trusted 
module, and to respond to that software executor with the signed result; and 

in response to such a response, that software executor is operable configured : 

to check the integrity of the signed result using the public key of the trusted module; 

and 

upon a successful integrity check of a successful license-check result, to request the 
operating system to use that particular data. 

20. (currendy amended) A computer platform comprising: 

a trusted module which is resistant to internal tampering and which stores a third party's 
public key certificate; 

means for storing license-related code comprising at least one of a secure executor for 
checking whether the computer platform or a user thereof is licensed to use particular data and for 
providing an interface for using the particular data and/ or for monitoring its usage, and a secure 
loader for checking whether the computer platform or a user thereof is licensed to install particular 
data and/ or for checking for data integrity before installation, wherein the license-related code 
includes, for at least one group of particular data, a (or a respective) software executor which 
specifies the respective group of particular data and which is operable configured to act as an 
interface to that group of particular data; 

means for storing a hashed version of the license-related code signed with the third parly's 
private key; and 

means for integrity checking the license-related code with reference to the signed version 
and the public key certificate and preventing the license-related code from being loaded if the 
integrity check fails; and wherein: 

the software executor (or at least one of the software executors) contains a public key of the 
trusted module and a licensing model for the respective particular data; 

the platform includes an operating system that is operable configured to request the software 
executor that its respective particular data be used; 

in response to such a request, the secure executor is operable configured to send to the 
respective software executor a request, signed using a private key of the trusted module, for a 
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licensing model for the particular data; 

in response to such latter request, that software executor is operable configured : 

to check the integrity of the request using the public key of the trusted module; and 
upon a successful integrity check, to send the licensing model to the secure executor; 

and 

upon receipt of the licensing model, the secure executor is operable configured : 
to perform a license-check using that licensing model; and 

upon a successful license-check result, to request the operating system to use that 
particular data. 

21. (currently amended) A computer platform comprising: 

a trusted module which is resistant to internal tampering and which stores a third party's 
public key certificate; 

means for storing license-related code comprising at least one of a secure executor for 
checking whether the computer platform or a user thereof is licensed to use particular data and for 
providing an interface for using the particular data and/ or for monitoring its usage, and a secure 
loader for checking whether the computer platform or a user thereof is licensed to install particular 
data and/ or for checking for data integrity before installation, the license-related code including 
secure key-transfer code for enabling a license key to be transferred between the trusted module and 
a further trusted module of another computer platform; 

means for storing a hashed version of the license-related code signed with the third parly's 
private key; and 

means for integrity checking the license-related code with reference to the signed version 
and the public key certificate and preventing the license-related code from being loaded if the 
integrity check fails; and wherein 

the secure executor contains at least one licensing model; 

the operating system is operable configured to request the secure executor that particular 
data be used; and 

in response to such a request, the secure executor is operable configured : 

to perform a license-check using the, or one of the, licensing models; and 
upon a successful license-check, to request the operating system to use that particular data. 
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22. (previously presented) A computer platform as claimed in claim 21, wherein the operating 
system is programmed to use the particular data only in response to the secure executor or the 
software executor. 

23. - 25. (cancelled) 

26. (currently amended) A computer platform as claimed in claim 21, wherein the trusted 
module is operable configured to log the request to the operating system to use the particular data. 

27. (currendy amended) A computer platform comprising: 

a trusted module which is resistant to internal tampering and which stores a third party's 
public key certificate; 

means for storing license-related code comprising at least one of a secure executor for 
checking whether the computer platform or a user thereof is licensed to use particular data and for 
providing an interface for using the particular data and/ or for monitoring its usage, and a secure 
loader for checking whether the computer platform or a user thereof is licensed to install particular 
data and/ or for checking for data integrity before installation, the secure executor containing at least 
one licensing model; 

means for storing a hashed version of the license-related code signed with the third party's 
private key; and 

means for integrity checking the license-related code with reference to the signed version 

and the public key certificate and preventing the license-related code from being loaded if the 

integrity check fails; wherein 

the computer platform includes an operating system that is operable configured to request 

the software executor that its respective particular data be used; and 

in response to such a request, the secure executor is operable configured : 

to perform a license-check using the, or one of the, licensing models; and 

upon a successful license-check, to request the operating system to use that particular data; 

the computer platform further including a further, removable, trusted module containing a 

user identity; 
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wherein the computer platform is operable configured to perform an authentication check 
between the first-mentioned trusted module and the removable trusted module; and 

wherein, upon license license-checking, the secure executor or software executor is operable 
configured to perform the license-check with reference to the user identity. 

28. (canceled) 

29. (currently amended) A computer platform having: 

a trusted module which is resistant to internal tampering and which stores a third party's 
public key certificate; 

means for storing license-related code comprising, for at least one group of particular data, a 
(or a respective) software executor which specifies the respective group of particular data and which 
is operable configured to act as an interface to that group of particular data, the license-related code 
further comprising at least one of: 

a secure executor for checking whether the computer platform or a user thereof is licensed 
to use particular data and for providing an interface for using the data and/ or for monitoring its 
usage; 

a secure loader for checking whether the computer platform or a user thereof is licensed to 
install particular data and/ or for checking for data integrity before installation; and 

means for storing a hashed version of the license-related code signed with the third party's 
private key; 

wherein the computer platform is programmed so that, upon booting of the computer 
platform: 

the license-related code is integrity checked with reference to the signed version and the 

public key certificate; and 

if the integrity check fails, the license-related code is prevented from being loaded; and 
wherein the means for storing the license-related code and/ or the means storing the hashed 

version of the license-related code are provided, at least in part, by the trusted module; and further 

wherein 

the software executor (or at least one of the software executors) is operable configured to 
request the trusted module to install particular data; 
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in response to such a request, the secure loader within die trusted module is operable 
configured to license-check whether the computer platform or a user thereof is licensed to install 
that particular data and/ or to check the integrity of that data and to respond to the operating system 
with the result of the check; and 

in dependence upon the response, the operating system is operable configured to install or 
not to install the particular data. 

30. (canceled) 

31. (previously presented) A computer platform as claimed in claim 29, wherein the platform 
includes an operating system programmed to install the particular data only in response to the 
trusted module. 

32. (previously presented) A computer platform as claimed in claim 29, wherein the trusted 
module and an operating system of the platform have a dedicated communications path 
therebetween which is inaccessible to other parts of the computer platform, and wherein the 
response from the trusted module to the operating system is supplied via the dedicated 
communications path. 

33. (currently amended) A computer platform as claimed in claim 29, wherein, if the check 
succeeds, the trusted module is operable configured to generate a log for auditing the particular data. 

34. (currently amended) A computer platform as claimed in claim 29, wherein, if the check 
succeeds, the secure loader is operable configured to perform a virus check on the particular data. 

35. (previously presented) A computer platform as claimed in claim 29, wherein, upon 
installation, the particular data is installed into the trusted module. 

36. (currently amended) A computer platform as claimed in claim 29: 

further including a further, removable, trusted module; 

wherein the platform is operable configured to perform an authentication check between the 
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first-mentioned trusted module and the removable trusted module; and 

wherein, upon installation, the particular data is installed into the further trusted module. 

37. (currently amended) A computer platform as claimed in claim 29, wherein: 

the secure executor contains at least one licensing model; 

the software executor (or at least one of the software executors) is operable configured to 
request the trusted module that its respective data be used; 

in response to such a request, the secure executor within the trusted module is operable 
configured: 

to perform a license-check using the, or one of the, licensing models; and 
upon a successful license-check, to request the operating system to use that data. 

38. (previously presented) A computer platform as claimed in claim 37, wherein the operating 
system is programmed to use the particular data only in response to the trusted module. 

39. (previously presented) A computer platform as claimed in claim 37, wherein the trusted 
module and an operating system of the platform have a dedicated communications path 
therebetween which is inaccessible to other parts of the computer platform, and wherein the request 
from the secure executor to the operating system to use the data is supplied via the dedicated 
communications path. 

40. (currently amended) A computer platform as claimed in claim 37, wherein the trusted 
module is operable configured to log the request to the operating system to use the data. 

41 . (currently amended) A computer platform as claimed in claim 37; 

further including a further, removable, trusted module containing a user identity; 

wherein the platform is operable configured to perform an authentication check between the 
first-mentioned trusted module and the removable trusted module; and 

wherein, upon license-checking, the secure executor or software executor is operable 
configured to perform the license-check with reference to the user identity. 



U. S. Appln. No. 10/049,211 

Submission dated March 31, 2008 

Reply to Office Action dated December 31, 2007 



Page 9 



42. (previously presented) A computer platform as claimed in claim 19, wherein the operating 
system is programmed to use the particular data only in response to the secure executor or the 
software executor. 

43. (currendy amended) A computer platform as claimed in claim 19, wherein the trusted 
module is operable configured to log the request to the operating system to use the data. 

44. (currently amended) A computer platform as claimed in claim 19; 

further including a further, removable, trusted module containing a user identity; 

wherein the platform is operable configured to perform an authentication check between the 
first-mentioned trusted module and die removable trusted module; and 

wherein, upon license-checking, the secure executor or software executor is operable 
configured to perform the license-check with reference to the user identity. 

45. (previously presented) A computer platform as claimed in claim 20, wherein the operating 
system is programmed to use the particular data only in response to the secure executor or the 
software executor. 

46. (currendy amended) A computer platform as claimed in claim 20, wherein the trusted 
module is operable configured to log the request to the operating system to use the data. 

47. (currendy amended) A computer platform as claimed in claim 20; 

further including a further, removable, trusted module containing a user identity; 

wherein the platform is operable configured to perform an authentication check between the 
first-mentioned trusted module and the removable trusted module; and 

wherein, upon license-checking, the secure executor or software executor is operable 
configured to perform the license-check with reference to the user identity. 



